Privacy Policy

For your account (your name, email, billing and how you use NobodyWaits), we are the controller: Bilawal Atif, trading as NobodyWaits, Dubai, United Arab Emirates. For anything about your data, write to [email protected].

For the content of your WhatsApp (your chats and the messages of the people you talk to), your business is the controller and we process it on your behalf, only to provide NobodyWaits to you. See “Processing for businesses” below.

• Purchase and set-up details: your name and email from checkout, and what you tell us in the form after buying: your business, what it does, your country, the WhatsApp number to connect, the languages your customers use and when to reach you.
• Account details: your name, email, business name, time zone, and a scrambled (hashed) form of your password. We never store the password itself.
• Workspace content: once you link WhatsApp, the chats and messages it syncs, including names, phone numbers, group names and media details; the questions, drafts, replies, meetings, broadcast lists and agent tasks made from them; and a short profile of how you write.
• Billing: your plan and subscription status. Paddle, our reseller, collects your payment details and billing address to take the payment; card details never reach us.
• Usage and security data: how much AI your workspace uses, when you sign in, and your IP address and browser, used to keep accounts safe and limit abuse.

• to set up your account from the details you send us after buying (to perform our contract with you);
• to run NobodyWaits: find questions, draft replies, and send what you approve or start (our contract with you);
• to send account emails: your set-up link, confirming your address, password resets, billing and important notices (our contract with you);
• to take payment and keep tax records (our contract with you, and legal obligations), and to prevent fraud and abuse and keep the service secure and working (our legitimate interests);
• to answer you when you contact us (our legitimate interest in helping you).

We do not sell personal data, use it for advertising, or use your messages to train AI models. Your own sent messages are used only to build your workspace’s private writing-style profile. Our staff do not read your messages, unless you ask us to for support or the law requires it.

We share data only with those needed to run NobodyWaits, each bound to protect it:

• Paddle.com Market Ltd (United Kingdom), our online reseller and Merchant of Record, which processes your order, payment, tax and billing details under its own privacy notice;
• our AI providers, which read message text (and, if voice-note reading is switched on, the audio of voice notes) to find questions and draft replies;
• our email providers, which deliver the emails we send and receive the emails you send us;
• DigitalOcean, LLC (servers in Frankfurt, Germany), where NobodyWaits and its data are hosted;
• professional advisers, such as accountants and lawyers, where we need their help;
• authorities, such as tax authorities, courts or the police, only where the law requires it.

We use our AI providers’ paid business services, whose terms do not allow them to train their models on your content. The full list of providers is available from [email protected]. Some of them are in the United States; where data leaves your region, the transfer is covered by safeguards such as the European Commission’s standard contractual clauses or the UK’s international data transfer agreement.

Where laws such as the GDPR apply, we process account data to perform our contract with you, to meet legal obligations such as keeping tax records, and for our legitimate interests in keeping NobodyWaits secure and preventing abuse. Workspace content is processed on your instructions as your processor. Where we rely on your consent, you can withdraw it at any time.

Where the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies, we process your account data because it is needed to enter into and carry out our contract with you, or to meet our legal obligations, including keeping the service secure as part of providing it. Where neither applies, we ask for your consent first, and you can withdraw it at any time. Your data is stored in Germany and some of our providers are in the United States and the United Kingdom; each is bound by contract to protect it.

We keep your data while your account is open. When you delete your account, your workspace and everything in it is erased straight away, and drops out of our backups within 7 days. If you buy but never set up an account, or your order is cancelled or refunded, we delete the business details you sent us within 90 days. We keep a record of your order (email, plan and dates) and billing records for as long as tax law requires. Server logs are deleted automatically as newer ones replace them.

You can download everything your workspace holds, or delete your account, from Settings at any time. You can also ask us to access, correct, erase or restrict your personal data, to send it to you or another provider in a portable format, or object to how we use it, by writing to [email protected]. We answer within one month. You may complain to your local data protection authority; in the UAE, that is the UAE Data Office.

If you messaged a business that uses NobodyWaits and want to use your rights over those messages, contact that business: it decides what happens to them, and we will help it respond.

Data travels encrypted (HTTPS). Each business’s workspace is kept in its own separate database. Passwords are hashed, sign-ins are rate limited, and access to production systems is restricted to the people who need it. No system is perfectly secure; if a breach affects your data, we will tell you without undue delay.

When we process your workspace content as your processor, we:

• process it only to provide NobodyWaits and on your documented instructions, which are these terms and your use of the app;
• make sure everyone who can access it is bound by confidentiality;
• protect it with the measures described under Security;
• use only the providers listed above, and tell you before adding a new one so you can object;
• help you answer requests from the people whose messages they are, and with breach notices;
• delete it when you delete your account, as described above.

This website sets no cookies of its own. The checkout page shows Paddle’s checkout, which may use cookies it needs to take your payment safely, as its privacy notice explains. The NobodyWaits app uses one cookie, to keep you signed in, and your browser’s storage for preferences such as dark mode. There are no advertising or tracking cookies, and no analytics.

NobodyWaits is for businesses and is not meant for anyone under 18.

If we change this policy in a way that matters, we will email you before the change takes effect.

Bilawal Atif, trading as NobodyWaits, Dubai, United Arab Emirates. Email [email protected].